Charming Kitten: Iran-linked group increasingly employs social engineering in cyber espionage

Coverage from Tech Radar indicates that Iran-linked cyber operations, notably by the group Charming Kitten, are increasingly relying on deception and human manipulation rather than exploiting technical software vulnerabilities to compromise sensitive user credentials and systems.

Charming Kitten, associated with Iran's security apparatus, targets officials, researchers, and corporate employees by impersonating trusted contacts. They use fake identities, often built with attractive or credible profiles, to establish trust before launching phishing attacks. This social engineering approach allows them to operate across both macOS and Windows platforms, affecting a diverse global user base.

Beyond external campaigns, concerns have been raised about insider threats, with allegations of trade secret theft from major technology firms like Google, involving methods such as photographing computer screens to avoid detection by cybersecurity systems.

Source: Tech Radar